$ rpki-client -vvf rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft File: avGRXIn1DHKtFvQZzTbvEvSto8c.mft (raw, json) Hash identifier: fRI5eir07Fg7KVtTu+dE76yi4aYHgBXcKxOKyduq3iI= Subject key identifier: 43:E2:00:FD:3D:2D:FF:D6:2A:26:32:4F:94:A4:E0:B8:9D:4E:C4:C3 Authority key identifier: 6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 Certificate issuer: /CN=A9127F37/serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft Manifest number: 6E Signing time: Wed 17 Sep 2025 07:39:04 +0000 Manifest this update: Wed 17 Sep 2025 07:39:03 +0000 Manifest next update: Wed 24 Sep 2025 07:39:03 +0000 Files and hashes: 1: avGRXIn1DHKtFvQZzTbvEvSto8c.crl (hash: yXVdgI3e2MAisuTi3g20YW/JFiolniNZWvmAL4rRzDM=) 2: 4FFEB60AEE8411EF981CD840C4F9AE02.roa (hash: 6QHt7FPePc9ME7gIJCijX1TcfEpQyK9WI3BiH/AqMwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127F37, serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Validity Not Before: Sep 17 07:39:03 2025 GMT Not After : Sep 24 07:39:03 2025 GMT Subject: CN=68ca6598-27d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:c3:c2:a0:be:9c:ba:25:c6:95:d7:22:be: 93:db:6a:9f:a4:74:70:82:83:bb:5c:03:c7:87:dc: 76:c3:63:95:2b:b5:69:14:67:74:b8:15:69:b4:2b: b5:78:b3:62:c6:99:2e:a9:34:70:ba:51:e2:30:69: e1:d9:cd:b8:85:83:d4:d2:33:9b:86:ec:68:2d:f0: 9d:b0:e5:14:96:07:31:66:17:70:99:76:1b:4d:a9: cf:cd:ee:e2:79:47:cc:5c:97:96:b9:a1:94:2e:7a: c8:90:91:8e:68:93:67:0b:16:e0:a9:48:22:4c:60: c0:93:9e:32:d4:f8:0c:5c:44:a1:39:6d:20:d3:7b: f9:bf:81:2d:9b:cc:cf:ec:38:82:16:ee:5e:0d:98: 8f:48:94:9e:46:5d:37:76:0d:51:39:8b:f2:10:fb: aa:03:36:eb:2e:b8:c3:5b:59:00:77:ba:84:37:8b: b7:a5:87:dd:ca:d0:c7:f0:d1:15:92:06:ce:c6:f7: d3:d6:73:b2:79:a2:d9:41:54:28:33:af:94:40:1b: 41:a5:c2:1f:5b:11:3a:83:2a:90:9b:e0:07:68:35: 29:93:e5:ed:a9:41:b2:e3:ab:1e:92:85:1b:90:95: e3:b3:99:13:5f:a1:5e:dd:65:3b:93:af:72:12:67: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E2:00:FD:3D:2D:FF:D6:2A:26:32:4F:94:A4:E0:B8:9D:4E:C4:C3 X509v3 Authority Key Identifier: keyid:6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:89:bb:9c:ad:fc:13:58:f9:29:5c:dd:32:18:3c:1f:10:02: 96:39:90:9f:5e:7a:69:92:4b:a5:b0:fc:cd:6a:1a:78:e7:07: 88:19:55:82:0b:e8:40:df:91:3c:13:9d:4a:7a:95:7d:9f:d4: fd:89:c9:c3:23:3b:49:15:0f:7b:24:72:b6:d8:b7:5c:10:70: 8e:c0:bd:30:6e:13:05:9a:9f:09:c9:80:9e:47:34:3d:28:ce: a4:c3:fa:16:28:39:ce:cd:b9:57:a4:1d:39:a6:b5:de:59:7f: c1:fb:d0:bc:10:4f:92:7c:0f:e3:b2:e9:ee:99:87:98:1d:74: 5d:83:5b:f6:4a:eb:e0:49:f6:16:c0:ed:8e:20:74:5c:e4:f7: 0d:31:5d:d3:3e:29:3a:22:23:6a:15:f6:ee:af:8c:a6:2a:eb: 57:b7:9d:33:2d:12:c0:88:18:e2:ce:a8:34:11:e6:26:42:80: 5e:8d:4c:76:0e:5d:17:dc:ab:2f:b1:dc:77:f4:83:f1:d1:58: e2:23:59:bf:af:1e:26:9c:79:d5:86:1c:34:6d:d8:7d:8f:95: ea:44:88:82:4f:6e:42:18:91:bb:fb:a4:14:2b:39:be:fd:07: f8:7c:9b:20:7b:44:99:7c:4b:37:a4:5c:76:ac:60:f9:95:3f: f7:30:bf:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0YzNzExMC8GA1UEBRMoNkFGMTkxNUM4OUY1MEM3MkFEMTZGNDE5Q0QzNkVGMTJG NEFEQTNDNzAeFw0yNTA5MTcwNzM5MDNaFw0yNTA5MjQwNzM5MDNaMBgxFjAUBgNV BAMTDTY4Y2E2NTk4LTI3ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXOcPCoL6cuiXGldcivpPbap+kdHCCg7tcA8eH3HbDY5UrtWkUZ3S4FWm0K7V4 s2LGmS6pNHC6UeIwaeHZzbiFg9TSM5uG7Ggt8J2w5RSWBzFmF3CZdhtNqc/N7uJ5 R8xcl5a5oZQuesiQkY5ok2cLFuCpSCJMYMCTnjLU+AxcRKE5bSDTe/m/gS2bzM/s OIIW7l4NmI9IlJ5GXTd2DVE5i/IQ+6oDNusuuMNbWQB3uoQ3i7elh93K0Mfw0RWS Bs7G99PWc7J5otlBVCgzr5RAG0Glwh9bETqDKpCb4AdoNSmT5e2pQbLjqx6ShRuQ leOzmRNfoV7dZTuTr3ISZxn9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ+IA/T0t /9YqJjJPlKTguJ1OxMMwHwYDVR0jBBgwFoAUavGRXIn1DHKtFvQZzTbvEvSto8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RjM3L0U1MTIzN0VBRUU4 MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhLdEZ2UVp6VGJ2RXZTdG84 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXZHUlhJbjFESEt0RnZRWnpUYnZFdlN0bzhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RjM3L0U1MTIzN0VBRUU4MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhL dEZ2UVp6VGJ2RXZTdG84Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAESJu5yt/BNY+Slc3TIYPB8QApY5kJ9eemmSS6Ww/M1qGnjnB4gZVYIL 6EDfkTwTnUp6lX2f1P2JycMjO0kVD3skcrbYt1wQcI7AvTBuEwWanwnJgJ5HND0o zqTD+hYoOc7NuVekHTmmtd5Zf8H70LwQT5J8D+Oy6e6Zh5gddF2DW/ZK6+BJ9hbA 7Y4gdFzk9w0xXdM+KToiI2oV9u6vjKYq61e3nTMtEsCIGOLOqDQR5iZCgF6NTHYO XRfcqy+x3Hf0g/HRWOIjWb+vHiacedWGHDRt2H2PlepEiIJPbkIYkbv7pBQrOb79 B/h8myB7RJl8SzekXHasYPmVP/cwv3o= -----END CERTIFICATE-----Generated at Thu Sep 18 19:13:33 2025 by rpki-client